1. Packages
  2. Packages
  3. CoreWeave Provider
  4. API Docs
  5. CksCluster
Viewing docs for CoreWeave v1.0.1
published on Monday, May 18, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-coreweave

coreweave.CksCluster

coreweave logo
Viewing docs for CoreWeave v1.0.1
published on Monday, May 18, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-coreweave

    Create and manage clusters on CoreWeave Kubernetes Service (CKS).

    Create CksCluster Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CksCluster(name: string, args: CksClusterArgs, opts?: CustomResourceOptions);
    @overload
def CksCluster(resource_name: str,
               args: CksClusterArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def CksCluster(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               service_cidr_name: Optional[str] = None,
               pod_cidr_name: Optional[str] = None,
               zone: Optional[str] = None,
               vpc_id: Optional[str] = None,
               internal_lb_cidr_names: Optional[Sequence[str]] = None,
               version: Optional[str] = None,
               pod_cidr_name_v6: Optional[str] = None,
               node_port_range: Optional[CksClusterNodePortRangeArgs] = None,
               audit_policy: Optional[str] = None,
               oidc: Optional[CksClusterOidcArgs] = None,
               name: Optional[str] = None,
               public: Optional[bool] = None,
               additional_server_sans: Optional[Sequence[str]] = None,
               service_cidr_name_v6: Optional[str] = None,
               shared_storage_cluster_id: Optional[str] = None,
               internal_lb_cidr_names_v6s: Optional[Sequence[str]] = None,
               authz_webhook: Optional[CksClusterAuthzWebhookArgs] = None,
               authn_webhook: Optional[CksClusterAuthnWebhookArgs] = None)
    func NewCksCluster(ctx *Context, name string, args CksClusterArgs, opts ...ResourceOption) (*CksCluster, error)
    public CksCluster(string name, CksClusterArgs args, CustomResourceOptions? opts = null)
    public CksCluster(String name, CksClusterArgs args)
public CksCluster(String name, CksClusterArgs args, CustomResourceOptions options)

    type: coreweave:CksCluster
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "coreweave_ckscluster" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args CksClusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CksClusterArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CksClusterArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CksClusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CksClusterArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cksClusterResource = new CoreWeave.CksCluster("cksClusterResource", new()
{
    ServiceCidrName = "string",
    PodCidrName = "string",
    Zone = "string",
    VpcId = "string",
    InternalLbCidrNames = new[]
    {
        "string",
    },
    Version = "string",
    PodCidrNameV6 = "string",
    NodePortRange = new CoreWeave.Inputs.CksClusterNodePortRangeArgs
    {
        End = 0,
        Start = 0,
    },
    AuditPolicy = "string",
    Oidc = new CoreWeave.Inputs.CksClusterOidcArgs
    {
        ClientId = "string",
        IssuerUrl = "string",
        AdminGroupBinding = "string",
        Ca = "string",
        GroupsClaim = "string",
        GroupsPrefix = "string",
        RequiredClaim = "string",
        SigningAlgs = new[]
        {
            "string",
        },
        UsernameClaim = "string",
        UsernamePrefix = "string",
    },
    Name = "string",
    Public = false,
    AdditionalServerSans = new[]
    {
        "string",
    },
    ServiceCidrNameV6 = "string",
    SharedStorageClusterId = "string",
    InternalLbCidrNamesV6s = new[]
    {
        "string",
    },
    AuthzWebhook = new CoreWeave.Inputs.CksClusterAuthzWebhookArgs
    {
        Server = "string",
        Ca = "string",
    },
    AuthnWebhook = new CoreWeave.Inputs.CksClusterAuthnWebhookArgs
    {
        Server = "string",
        Ca = "string",
    },
});

    example, err := coreweave.NewCksCluster(ctx, "cksClusterResource", &coreweave.CksClusterArgs{
	ServiceCidrName: pulumi.String("string"),
	PodCidrName:     pulumi.String("string"),
	Zone:            pulumi.String("string"),
	VpcId:           pulumi.String("string"),
	InternalLbCidrNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	Version:       pulumi.String("string"),
	PodCidrNameV6: pulumi.String("string"),
	NodePortRange: &coreweave.CksClusterNodePortRangeArgs{
		End:   pulumi.Int(0),
		Start: pulumi.Int(0),
	},
	AuditPolicy: pulumi.String("string"),
	Oidc: &coreweave.CksClusterOidcArgs{
		ClientId:          pulumi.String("string"),
		IssuerUrl:         pulumi.String("string"),
		AdminGroupBinding: pulumi.String("string"),
		Ca:                pulumi.String("string"),
		GroupsClaim:       pulumi.String("string"),
		GroupsPrefix:      pulumi.String("string"),
		RequiredClaim:     pulumi.String("string"),
		SigningAlgs: pulumi.StringArray{
			pulumi.String("string"),
		},
		UsernameClaim:  pulumi.String("string"),
		UsernamePrefix: pulumi.String("string"),
	},
	Name:   pulumi.String("string"),
	Public: pulumi.Bool(false),
	AdditionalServerSans: pulumi.StringArray{
		pulumi.String("string"),
	},
	ServiceCidrNameV6:      pulumi.String("string"),
	SharedStorageClusterId: pulumi.String("string"),
	InternalLbCidrNamesV6s: pulumi.StringArray{
		pulumi.String("string"),
	},
	AuthzWebhook: &coreweave.CksClusterAuthzWebhookArgs{
		Server: pulumi.String("string"),
		Ca:     pulumi.String("string"),
	},
	AuthnWebhook: &coreweave.CksClusterAuthnWebhookArgs{
		Server: pulumi.String("string"),
		Ca:     pulumi.String("string"),
	},
})

    resource "coreweave_ckscluster" "cksClusterResource" {
  service_cidr_name      = "string"
  pod_cidr_name          = "string"
  zone                   = "string"
  vpc_id                 = "string"
  internal_lb_cidr_names = ["string"]
  version                = "string"
  pod_cidr_name_v6       = "string"
  node_port_range = {
    end   = 0
    start = 0
  }
  audit_policy = "string"
  oidc = {
    client_id           = "string"
    issuer_url          = "string"
    admin_group_binding = "string"
    ca                  = "string"
    groups_claim        = "string"
    groups_prefix       = "string"
    required_claim      = "string"
    signing_algs        = ["string"]
    username_claim      = "string"
    username_prefix     = "string"
  }
  name                       = "string"
  public                     = false
  additional_server_sans     = ["string"]
  service_cidr_name_v6       = "string"
  shared_storage_cluster_id  = "string"
  internal_lb_cidr_names_v6s = ["string"]
  authz_webhook = {
    server = "string"
    ca     = "string"
  }
  authn_webhook = {
    server = "string"
    ca     = "string"
  }
}

    var cksClusterResource = new CksCluster("cksClusterResource", CksClusterArgs.builder()
    .serviceCidrName("string")
    .podCidrName("string")
    .zone("string")
    .vpcId("string")
    .internalLbCidrNames("string")
    .version("string")
    .podCidrNameV6("string")
    .nodePortRange(CksClusterNodePortRangeArgs.builder()
        .end(0)
        .start(0)
        .build())
    .auditPolicy("string")
    .oidc(CksClusterOidcArgs.builder()
        .clientId("string")
        .issuerUrl("string")
        .adminGroupBinding("string")
        .ca("string")
        .groupsClaim("string")
        .groupsPrefix("string")
        .requiredClaim("string")
        .signingAlgs("string")
        .usernameClaim("string")
        .usernamePrefix("string")
        .build())
    .name("string")
    .public_(false)
    .additionalServerSans("string")
    .serviceCidrNameV6("string")
    .sharedStorageClusterId("string")
    .internalLbCidrNamesV6s("string")
    .authzWebhook(CksClusterAuthzWebhookArgs.builder()
        .server("string")
        .ca("string")
        .build())
    .authnWebhook(CksClusterAuthnWebhookArgs.builder()
        .server("string")
        .ca("string")
        .build())
    .build());

    cks_cluster_resource = coreweave.CksCluster("cksClusterResource",
    service_cidr_name="string",
    pod_cidr_name="string",
    zone="string",
    vpc_id="string",
    internal_lb_cidr_names=["string"],
    version="string",
    pod_cidr_name_v6="string",
    node_port_range={
        "end": 0,
        "start": 0,
    },
    audit_policy="string",
    oidc={
        "client_id": "string",
        "issuer_url": "string",
        "admin_group_binding": "string",
        "ca": "string",
        "groups_claim": "string",
        "groups_prefix": "string",
        "required_claim": "string",
        "signing_algs": ["string"],
        "username_claim": "string",
        "username_prefix": "string",
    },
    name="string",
    public=False,
    additional_server_sans=["string"],
    service_cidr_name_v6="string",
    shared_storage_cluster_id="string",
    internal_lb_cidr_names_v6s=["string"],
    authz_webhook={
        "server": "string",
        "ca": "string",
    },
    authn_webhook={
        "server": "string",
        "ca": "string",
    })

    const cksClusterResource = new coreweave.CksCluster("cksClusterResource", {
    serviceCidrName: "string",
    podCidrName: "string",
    zone: "string",
    vpcId: "string",
    internalLbCidrNames: ["string"],
    version: "string",
    podCidrNameV6: "string",
    nodePortRange: {
        end: 0,
        start: 0,
    },
    auditPolicy: "string",
    oidc: {
        clientId: "string",
        issuerUrl: "string",
        adminGroupBinding: "string",
        ca: "string",
        groupsClaim: "string",
        groupsPrefix: "string",
        requiredClaim: "string",
        signingAlgs: ["string"],
        usernameClaim: "string",
        usernamePrefix: "string",
    },
    name: "string",
    "public": false,
    additionalServerSans: ["string"],
    serviceCidrNameV6: "string",
    sharedStorageClusterId: "string",
    internalLbCidrNamesV6s: ["string"],
    authzWebhook: {
        server: "string",
        ca: "string",
    },
    authnWebhook: {
        server: "string",
        ca: "string",
    },
});

    type: coreweave:CksCluster
properties:
    additionalServerSans:
        - string
    auditPolicy: string
    authnWebhook:
        ca: string
        server: string
    authzWebhook:
        ca: string
        server: string
    internalLbCidrNames:
        - string
    internalLbCidrNamesV6s:
        - string
    name: string
    nodePortRange:
        end: 0
        start: 0
    oidc:
        adminGroupBinding: string
        ca: string
        clientId: string
        groupsClaim: string
        groupsPrefix: string
        issuerUrl: string
        requiredClaim: string
        signingAlgs:
            - string
        usernameClaim: string
        usernamePrefix: string
    podCidrName: string
    podCidrNameV6: string
    public: false
    serviceCidrName: string
    serviceCidrNameV6: string
    sharedStorageClusterId: string
    version: string
    vpcId: string
    zone: string

    CksCluster Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CksCluster resource accepts the following input properties:

    InternalLbCidrNames List<string>
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    PodCidrName string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    ServiceCidrName string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    Version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    VpcId string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    Zone string
    The Availability Zone in which the cluster is located.
    AdditionalServerSans List<string>
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    AuditPolicy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    AuthnWebhook Pulumi.CoreWeave.Inputs.CksClusterAuthnWebhook
    Authentication webhook configuration for the cluster.
    AuthzWebhook Pulumi.CoreWeave.Inputs.CksClusterAuthzWebhook
    Authorization webhook configuration for the cluster.
    InternalLbCidrNamesV6s List<string>
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Name string
    The name of the cluster. Must not be longer than 30 characters.
    NodePortRange Pulumi.CoreWeave.Inputs.CksClusterNodePortRange
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    Oidc Pulumi.CoreWeave.Inputs.CksClusterOidc
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    PodCidrNameV6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    ServiceCidrNameV6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    SharedStorageClusterId string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    InternalLbCidrNames []string
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    PodCidrName string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    ServiceCidrName string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    Version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    VpcId string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    Zone string
    The Availability Zone in which the cluster is located.
    AdditionalServerSans []string
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    AuditPolicy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    AuthnWebhook CksClusterAuthnWebhookArgs
    Authentication webhook configuration for the cluster.
    AuthzWebhook CksClusterAuthzWebhookArgs
    Authorization webhook configuration for the cluster.
    InternalLbCidrNamesV6s []string
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Name string
    The name of the cluster. Must not be longer than 30 characters.
    NodePortRange CksClusterNodePortRangeArgs
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    Oidc CksClusterOidcArgs
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    PodCidrNameV6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    ServiceCidrNameV6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    SharedStorageClusterId string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    internal_lb_cidr_names list(string)
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    pod_cidr_name string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    service_cidr_name string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpc_id string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone string
    The Availability Zone in which the cluster is located.
    additional_server_sans list(string)
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    audit_policy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authn_webhook object
    Authentication webhook configuration for the cluster.
    authz_webhook object
    Authorization webhook configuration for the cluster.
    internal_lb_cidr_names_v6s list(string)
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name string
    The name of the cluster. Must not be longer than 30 characters.
    node_port_range object
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc object
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    pod_cidr_name_v6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    service_cidr_name_v6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    shared_storage_cluster_id string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    internalLbCidrNames List<String>
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    podCidrName String
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    serviceCidrName String
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    version String
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpcId String
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone String
    The Availability Zone in which the cluster is located.
    additionalServerSans List<String>
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    auditPolicy String
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authnWebhook CksClusterAuthnWebhook
    Authentication webhook configuration for the cluster.
    authzWebhook CksClusterAuthzWebhook
    Authorization webhook configuration for the cluster.
    internalLbCidrNamesV6s List<String>
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name String
    The name of the cluster. Must not be longer than 30 characters.
    nodePortRange CksClusterNodePortRange
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc CksClusterOidc
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    podCidrNameV6 String
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public_ Boolean
    Whether the cluster's api-server is publicly accessible from the internet.
    serviceCidrNameV6 String
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    sharedStorageClusterId String
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    internalLbCidrNames string[]
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    podCidrName string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    serviceCidrName string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpcId string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone string
    The Availability Zone in which the cluster is located.
    additionalServerSans string[]
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    auditPolicy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authnWebhook CksClusterAuthnWebhook
    Authentication webhook configuration for the cluster.
    authzWebhook CksClusterAuthzWebhook
    Authorization webhook configuration for the cluster.
    internalLbCidrNamesV6s string[]
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name string
    The name of the cluster. Must not be longer than 30 characters.
    nodePortRange CksClusterNodePortRange
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc CksClusterOidc
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    podCidrNameV6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public boolean
    Whether the cluster's api-server is publicly accessible from the internet.
    serviceCidrNameV6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    sharedStorageClusterId string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    internal_lb_cidr_names Sequence[str]
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    pod_cidr_name str
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    service_cidr_name str
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    version str
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpc_id str
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone str
    The Availability Zone in which the cluster is located.
    additional_server_sans Sequence[str]
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    audit_policy str
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authn_webhook CksClusterAuthnWebhookArgs
    Authentication webhook configuration for the cluster.
    authz_webhook CksClusterAuthzWebhookArgs
    Authorization webhook configuration for the cluster.
    internal_lb_cidr_names_v6s Sequence[str]
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name str
    The name of the cluster. Must not be longer than 30 characters.
    node_port_range CksClusterNodePortRangeArgs
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc CksClusterOidcArgs
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    pod_cidr_name_v6 str
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    service_cidr_name_v6 str
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    shared_storage_cluster_id str
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    internalLbCidrNames List<String>
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    podCidrName String
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    serviceCidrName String
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    version String
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpcId String
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone String
    The Availability Zone in which the cluster is located.
    additionalServerSans List<String>
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    auditPolicy String
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authnWebhook Property Map
    Authentication webhook configuration for the cluster.
    authzWebhook Property Map
    Authorization webhook configuration for the cluster.
    internalLbCidrNamesV6s List<String>
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name String
    The name of the cluster. Must not be longer than 30 characters.
    nodePortRange Property Map
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc Property Map
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    podCidrNameV6 String
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public Boolean
    Whether the cluster's api-server is publicly accessible from the internet.
    serviceCidrNameV6 String
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    sharedStorageClusterId String
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CksCluster resource produces the following output properties:

    ApiServerEndpoint string
    The endpoint for the cluster's api-server.
    Id string
    The provider-assigned unique ID for this managed resource.
    ServiceAccountOidcIssuerUrl string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    Status string
    The current status of the cluster.
    ApiServerEndpoint string
    The endpoint for the cluster's api-server.
    Id string
    The provider-assigned unique ID for this managed resource.
    ServiceAccountOidcIssuerUrl string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    Status string
    The current status of the cluster.
    api_server_endpoint string
    The endpoint for the cluster's api-server.
    id string
    The provider-assigned unique ID for this managed resource.
    service_account_oidc_issuer_url string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    status string
    The current status of the cluster.
    apiServerEndpoint String
    The endpoint for the cluster's api-server.
    id String
    The provider-assigned unique ID for this managed resource.
    serviceAccountOidcIssuerUrl String
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    status String
    The current status of the cluster.
    apiServerEndpoint string
    The endpoint for the cluster's api-server.
    id string
    The provider-assigned unique ID for this managed resource.
    serviceAccountOidcIssuerUrl string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    status string
    The current status of the cluster.
    api_server_endpoint str
    The endpoint for the cluster's api-server.
    id str
    The provider-assigned unique ID for this managed resource.
    service_account_oidc_issuer_url str
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    status str
    The current status of the cluster.
    apiServerEndpoint String
    The endpoint for the cluster's api-server.
    id String
    The provider-assigned unique ID for this managed resource.
    serviceAccountOidcIssuerUrl String
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    status String
    The current status of the cluster.

    Look up Existing CksCluster Resource

    Get an existing CksCluster resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CksClusterState, opts?: CustomResourceOptions): CksCluster
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        additional_server_sans: Optional[Sequence[str]] = None,
        api_server_endpoint: Optional[str] = None,
        audit_policy: Optional[str] = None,
        authn_webhook: Optional[CksClusterAuthnWebhookArgs] = None,
        authz_webhook: Optional[CksClusterAuthzWebhookArgs] = None,
        internal_lb_cidr_names: Optional[Sequence[str]] = None,
        internal_lb_cidr_names_v6s: Optional[Sequence[str]] = None,
        name: Optional[str] = None,
        node_port_range: Optional[CksClusterNodePortRangeArgs] = None,
        oidc: Optional[CksClusterOidcArgs] = None,
        pod_cidr_name: Optional[str] = None,
        pod_cidr_name_v6: Optional[str] = None,
        public: Optional[bool] = None,
        service_account_oidc_issuer_url: Optional[str] = None,
        service_cidr_name: Optional[str] = None,
        service_cidr_name_v6: Optional[str] = None,
        shared_storage_cluster_id: Optional[str] = None,
        status: Optional[str] = None,
        version: Optional[str] = None,
        vpc_id: Optional[str] = None,
        zone: Optional[str] = None) -> CksCluster
    func GetCksCluster(ctx *Context, name string, id IDInput, state *CksClusterState, opts ...ResourceOption) (*CksCluster, error)
    public static CksCluster Get(string name, Input<string> id, CksClusterState? state, CustomResourceOptions? opts = null)
    public static CksCluster get(String name, Output<String> id, CksClusterState state, CustomResourceOptions options)
    resources:  _:    type: coreweave:CksCluster    get:      id: ${id}
    import {
  to = coreweave_ckscluster.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AdditionalServerSans List<string>
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    ApiServerEndpoint string
    The endpoint for the cluster's api-server.
    AuditPolicy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    AuthnWebhook Pulumi.CoreWeave.Inputs.CksClusterAuthnWebhook
    Authentication webhook configuration for the cluster.
    AuthzWebhook Pulumi.CoreWeave.Inputs.CksClusterAuthzWebhook
    Authorization webhook configuration for the cluster.
    InternalLbCidrNames List<string>
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    InternalLbCidrNamesV6s List<string>
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Name string
    The name of the cluster. Must not be longer than 30 characters.
    NodePortRange Pulumi.CoreWeave.Inputs.CksClusterNodePortRange
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    Oidc Pulumi.CoreWeave.Inputs.CksClusterOidc
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    PodCidrName string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    PodCidrNameV6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    ServiceAccountOidcIssuerUrl string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    ServiceCidrName string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    ServiceCidrNameV6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    SharedStorageClusterId string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    Status string
    The current status of the cluster.
    Version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    VpcId string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    Zone string
    The Availability Zone in which the cluster is located.
    AdditionalServerSans []string
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    ApiServerEndpoint string
    The endpoint for the cluster's api-server.
    AuditPolicy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    AuthnWebhook CksClusterAuthnWebhookArgs
    Authentication webhook configuration for the cluster.
    AuthzWebhook CksClusterAuthzWebhookArgs
    Authorization webhook configuration for the cluster.
    InternalLbCidrNames []string
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    InternalLbCidrNamesV6s []string
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Name string
    The name of the cluster. Must not be longer than 30 characters.
    NodePortRange CksClusterNodePortRangeArgs
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    Oidc CksClusterOidcArgs
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    PodCidrName string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    PodCidrNameV6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    Public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    ServiceAccountOidcIssuerUrl string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    ServiceCidrName string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    ServiceCidrNameV6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    SharedStorageClusterId string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    Status string
    The current status of the cluster.
    Version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    VpcId string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    Zone string
    The Availability Zone in which the cluster is located.
    additional_server_sans list(string)
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    api_server_endpoint string
    The endpoint for the cluster's api-server.
    audit_policy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authn_webhook object
    Authentication webhook configuration for the cluster.
    authz_webhook object
    Authorization webhook configuration for the cluster.
    internal_lb_cidr_names list(string)
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    internal_lb_cidr_names_v6s list(string)
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name string
    The name of the cluster. Must not be longer than 30 characters.
    node_port_range object
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc object
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    pod_cidr_name string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    pod_cidr_name_v6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    service_account_oidc_issuer_url string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    service_cidr_name string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    service_cidr_name_v6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    shared_storage_cluster_id string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    status string
    The current status of the cluster.
    version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpc_id string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone string
    The Availability Zone in which the cluster is located.
    additionalServerSans List<String>
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    apiServerEndpoint String
    The endpoint for the cluster's api-server.
    auditPolicy String
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authnWebhook CksClusterAuthnWebhook
    Authentication webhook configuration for the cluster.
    authzWebhook CksClusterAuthzWebhook
    Authorization webhook configuration for the cluster.
    internalLbCidrNames List<String>
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    internalLbCidrNamesV6s List<String>
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name String
    The name of the cluster. Must not be longer than 30 characters.
    nodePortRange CksClusterNodePortRange
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc CksClusterOidc
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    podCidrName String
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    podCidrNameV6 String
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public_ Boolean
    Whether the cluster's api-server is publicly accessible from the internet.
    serviceAccountOidcIssuerUrl String
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    serviceCidrName String
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    serviceCidrNameV6 String
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    sharedStorageClusterId String
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    status String
    The current status of the cluster.
    version String
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpcId String
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone String
    The Availability Zone in which the cluster is located.
    additionalServerSans string[]
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    apiServerEndpoint string
    The endpoint for the cluster's api-server.
    auditPolicy string
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authnWebhook CksClusterAuthnWebhook
    Authentication webhook configuration for the cluster.
    authzWebhook CksClusterAuthzWebhook
    Authorization webhook configuration for the cluster.
    internalLbCidrNames string[]
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    internalLbCidrNamesV6s string[]
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name string
    The name of the cluster. Must not be longer than 30 characters.
    nodePortRange CksClusterNodePortRange
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc CksClusterOidc
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    podCidrName string
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    podCidrNameV6 string
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public boolean
    Whether the cluster's api-server is publicly accessible from the internet.
    serviceAccountOidcIssuerUrl string
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    serviceCidrName string
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    serviceCidrNameV6 string
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    sharedStorageClusterId string
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    status string
    The current status of the cluster.
    version string
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpcId string
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone string
    The Availability Zone in which the cluster is located.
    additional_server_sans Sequence[str]
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    api_server_endpoint str
    The endpoint for the cluster's api-server.
    audit_policy str
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authn_webhook CksClusterAuthnWebhookArgs
    Authentication webhook configuration for the cluster.
    authz_webhook CksClusterAuthzWebhookArgs
    Authorization webhook configuration for the cluster.
    internal_lb_cidr_names Sequence[str]
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    internal_lb_cidr_names_v6s Sequence[str]
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name str
    The name of the cluster. Must not be longer than 30 characters.
    node_port_range CksClusterNodePortRangeArgs
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc CksClusterOidcArgs
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    pod_cidr_name str
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    pod_cidr_name_v6 str
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public bool
    Whether the cluster's api-server is publicly accessible from the internet.
    service_account_oidc_issuer_url str
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    service_cidr_name str
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    service_cidr_name_v6 str
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    shared_storage_cluster_id str
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    status str
    The current status of the cluster.
    version str
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpc_id str
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone str
    The Availability Zone in which the cluster is located.
    additionalServerSans List<String>
    Additional Subject Alternative Names (SANs) to include in the Kubernetes API server TLS certificate. Maximum 10 entries.
    apiServerEndpoint String
    The endpoint for the cluster's api-server.
    auditPolicy String
    Audit policy for the cluster. Must be provided as a base64-encoded JSON/YAML string.
    authnWebhook Property Map
    Authentication webhook configuration for the cluster.
    authzWebhook Property Map
    Authorization webhook configuration for the cluster.
    internalLbCidrNames List<String>
    The names of the vpc prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the internet. The prefixes must exist in the cluster's VPC. This field is append-only.
    internalLbCidrNamesV6s List<String>
    IPv6 Internal Load Balancer CIDR names. If any IPv6 field is set, then ALL IPv6 fields must be set.
    name String
    The name of the cluster. Must not be longer than 30 characters.
    nodePortRange Property Map
    Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster.
    oidc Property Map
    OpenID Connect (OIDC) configuration for authentication to the api-server.
    podCidrName String
    The name of the vpc prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC.
    podCidrNameV6 String
    IPv6 Pod CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    public Boolean
    Whether the cluster's api-server is publicly accessible from the internet.
    serviceAccountOidcIssuerUrl String
    The URL of the OIDC issuer for the cluster's service account tokens. This value corresponds to the --service-account-issuer flag on the kube-apiserver.
    serviceCidrName String
    The name of the vpc prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC.
    serviceCidrNameV6 String
    IPv6 Service CIDR name. If any IPv6 field is set, then ALL IPv6 fields must be set.
    sharedStorageClusterId String
    The clusterId of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
    status String
    The current status of the cluster.
    version String
    The version of Kubernetes to run on the cluster, in minor version format (e.g. 'v1.35'). Patch versions are automatically applied by CKS as they are released.
    vpcId String
    The ID of the VPC in which the cluster is located. Must be a VPC in the same Availability Zone as the cluster.
    zone String
    The Availability Zone in which the cluster is located.

    Supporting Types

    CksClusterAuthnWebhook, CksClusterAuthnWebhookArgs

    Server string
    The URL of the webhook server.
    Ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    Server string
    The URL of the webhook server.
    Ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server string
    The URL of the webhook server.
    ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server String
    The URL of the webhook server.
    ca String
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server string
    The URL of the webhook server.
    ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server str
    The URL of the webhook server.
    ca str
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server String
    The URL of the webhook server.
    ca String
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.

    CksClusterAuthzWebhook, CksClusterAuthzWebhookArgs

    Server string
    The URL of the webhook server.
    Ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    Server string
    The URL of the webhook server.
    Ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server string
    The URL of the webhook server.
    ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server String
    The URL of the webhook server.
    ca String
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server string
    The URL of the webhook server.
    ca string
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server str
    The URL of the webhook server.
    ca str
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.
    server String
    The URL of the webhook server.
    ca String
    The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate.

    CksClusterNodePortRange, CksClusterNodePortRangeArgs

    End int
    Start int
    End int
    Start int
    end number
    start number
    end Integer
    start Integer
    end number
    start number
    end int
    start int
    end Number
    start Number

    CksClusterOidc, CksClusterOidcArgs

    ClientId string
    The client ID for the OIDC client.
    IssuerUrl string
    The URL of the OIDC issuer.
    AdminGroupBinding string
    The OIDC group that is bound to the cluster-admin role for bootstrap access to the cluster.
    Ca string
    The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate.
    GroupsClaim string
    The claim to use as the groups.
    GroupsPrefix string
    The prefix to use for the groups.
    RequiredClaim string
    The claim to require for authentication.
    SigningAlgs List<string>
    A list of signing algorithms that the OpenID Connect discovery endpoint uses.
    UsernameClaim string
    The claim to use as the username.
    UsernamePrefix string
    The prefix to use for the username.
    ClientId string
    The client ID for the OIDC client.
    IssuerUrl string
    The URL of the OIDC issuer.
    AdminGroupBinding string
    The OIDC group that is bound to the cluster-admin role for bootstrap access to the cluster.
    Ca string
    The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate.
    GroupsClaim string
    The claim to use as the groups.
    GroupsPrefix string
    The prefix to use for the groups.
    RequiredClaim string
    The claim to require for authentication.
    SigningAlgs []string
    A list of signing algorithms that the OpenID Connect discovery endpoint uses.
    UsernameClaim string
    The claim to use as the username.
    UsernamePrefix string
    The prefix to use for the username.
    client_id string
    The client ID for the OIDC client.
    issuer_url string
    The URL of the OIDC issuer.
    admin_group_binding string
    The OIDC group that is bound to the cluster-admin role for bootstrap access to the cluster.
    ca string
    The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate.
    groups_claim string
    The claim to use as the groups.
    groups_prefix string
    The prefix to use for the groups.
    required_claim string
    The claim to require for authentication.
    signing_algs list(string)
    A list of signing algorithms that the OpenID Connect discovery endpoint uses.
    username_claim string
    The claim to use as the username.
    username_prefix string
    The prefix to use for the username.
    clientId String
    The client ID for the OIDC client.
    issuerUrl String
    The URL of the OIDC issuer.
    adminGroupBinding String
    The OIDC group that is bound to the cluster-admin role for bootstrap access to the cluster.
    ca String
    The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate.
    groupsClaim String
    The claim to use as the groups.
    groupsPrefix String
    The prefix to use for the groups.
    requiredClaim String
    The claim to require for authentication.
    signingAlgs List<String>
    A list of signing algorithms that the OpenID Connect discovery endpoint uses.
    usernameClaim String
    The claim to use as the username.
    usernamePrefix String
    The prefix to use for the username.
    clientId string
    The client ID for the OIDC client.
    issuerUrl string
    The URL of the OIDC issuer.
    adminGroupBinding string
    The OIDC group that is bound to the cluster-admin role for bootstrap access to the cluster.
    ca string
    The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate.
    groupsClaim string
    The claim to use as the groups.
    groupsPrefix string
    The prefix to use for the groups.
    requiredClaim string
    The claim to require for authentication.
    signingAlgs string[]
    A list of signing algorithms that the OpenID Connect discovery endpoint uses.
    usernameClaim string
    The claim to use as the username.
    usernamePrefix string
    The prefix to use for the username.
    client_id str
    The client ID for the OIDC client.
    issuer_url str
    The URL of the OIDC issuer.
    admin_group_binding str
    The OIDC group that is bound to the cluster-admin role for bootstrap access to the cluster.
    ca str
    The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate.
    groups_claim str
    The claim to use as the groups.
    groups_prefix str
    The prefix to use for the groups.
    required_claim str
    The claim to require for authentication.
    signing_algs Sequence[str]
    A list of signing algorithms that the OpenID Connect discovery endpoint uses.
    username_claim str
    The claim to use as the username.
    username_prefix str
    The prefix to use for the username.
    clientId String
    The client ID for the OIDC client.
    issuerUrl String
    The URL of the OIDC issuer.
    adminGroupBinding String
    The OIDC group that is bound to the cluster-admin role for bootstrap access to the cluster.
    ca String
    The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate.
    groupsClaim String
    The claim to use as the groups.
    groupsPrefix String
    The prefix to use for the groups.
    requiredClaim String
    The claim to require for authentication.
    signingAlgs List<String>
    A list of signing algorithms that the OpenID Connect discovery endpoint uses.
    usernameClaim String
    The claim to use as the username.
    usernamePrefix String
    The prefix to use for the username.

    Import

    $ pulumi import coreweave:index/cksCluster:CksCluster default {{id}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    coreweave pulumi/pulumi-coreweave
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the coreweave Terraform Provider.
    coreweave logo
    Viewing docs for CoreWeave v1.0.1
    published on Monday, May 18, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-coreweave
      Try Pulumi Cloud free. Your team will thank you.